libnested project records
2 published records for vendor libnested project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-28283No exploit | Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead tlibnested project · libnested | Critical9.8 | — | 3.4% | Dec 29, 2020 |
40Plan | CVE-2022-25352No exploit | The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js.libnested project · libnested · CWE-1321 | Critical9.8 | — | 2.1% | Mar 17, 2022 |
- CVE-2020-2828340Plan
Prototype pollution vulnerability in 'libnested' versions 0.0.0 through 1.5.0 allows an attacker to cause a denial of service and may lead t
CriticalCVSS 9.8No exploitEPSS 3%libnested project · libnestedDec 29, 2020
- CVE-2022-2535240Plan
The package libnested before 1.5.2 are vulnerable to Prototype Pollution via the set function in index.js.
CriticalCVSS 9.8No exploitEPSS 2%libnested project · libnestedMar 17, 2022